diff --git a/versions.lock b/versions.lock
index 5783a071b..16b821a3a 100644
--- a/versions.lock
+++ b/versions.lock
@@ -11,9 +11,9 @@ com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.18.2 (1 constraints: 81
 com.github.ben-manes.caffeine:caffeine:3.1.8 (3 constraints: 0f284736)
 com.google.auto:auto-common:1.2.1 (1 constraints: 17120ffb)
 com.google.code.findbugs:jsr305:3.0.2 (14 constraints: 49e26143)
-com.google.errorprone:error_prone_annotations:2.7.1 (18 constraints: 80207776)
+com.google.errorprone:error_prone_annotations:2.7.1 (18 constraints: 7f208773)
 com.google.guava:failureaccess:1.0.2 (1 constraints: 150ae2b4)
-com.google.guava:guava:33.3.1-jre (17 constraints: 2f2b2816)
+com.google.guava:guava:33.4.0-jre (17 constraints: 2f2b2a16)
 com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava (1 constraints: bd17c918)
 com.google.j2objc:j2objc-annotations:3.0.0 (1 constraints: 150aeab4)
 com.palantir.common:streams:2.4.0 (1 constraints: 08050136)
diff --git a/versions.props b/versions.props
index 2bd7bc3e7..741fb6635 100644
--- a/versions.props
+++ b/versions.props
@@ -1,7 +1,7 @@
 com.fasterxml.jackson.*:* = 2.18.2
 com.fasterxml.jackson.core:jackson-databind = 2.18.2
 com.google.code.findbugs:jsr305 = 3.0.2
-com.google.guava:guava = 33.3.1-jre
+com.google.guava:guava = 33.4.0-jre
 com.google.testing.compile:compile-testing = 0.21.0
 com.palantir.common:streams = 2.4.0
 com.palantir.conjure.java.api:* = 2.57.0